From: Dr. Stephen Henson <steve@openssl.org>
Date: Fri, 19 Aug 2011 23:25:10 +0000 (+0000)
Subject: Correct maximum request length. SP800-90 quotes maximum bits, not bytes.
X-Git-Tag: OpenSSL-fips-2_0-rc1~204
X-Git-Url: https://git.openssl.org/?p=openssl.git;a=commitdiff_plain;h=46883b67deeec2a6e4ed5ab374d101d27d9b8e21

Correct maximum request length. SP800-90 quotes maximum bits, not bytes.
---

diff --git a/fips/rand/fips_drbg_ctr.c b/fips/rand/fips_drbg_ctr.c
index a7f5b46753..47abec651d 100644
--- a/fips/rand/fips_drbg_ctr.c
+++ b/fips/rand/fips_drbg_ctr.c
@@ -429,7 +429,7 @@ int fips_drbg_ctr_init(DRBG_CTX *dctx)
 		dctx->max_adin = dctx->seedlen;
 		}
 
-	dctx->max_request = 1<<19;
+	dctx->max_request = 1<<16;
 	dctx->reseed_interval = 1<<24;
 
 	return 1;
diff --git a/fips/rand/fips_drbg_hash.c b/fips/rand/fips_drbg_hash.c
index 481b356ec6..07873ca02d 100644
--- a/fips/rand/fips_drbg_hash.c
+++ b/fips/rand/fips_drbg_hash.c
@@ -371,7 +371,7 @@ int fips_drbg_hash_init(DRBG_CTX *dctx)
 	dctx->max_pers = DRBG_MAX_LENGTH;
 	dctx->max_adin = DRBG_MAX_LENGTH;
 
-	dctx->max_request = 1<<19;
+	dctx->max_request = 1<<16;
 	dctx->reseed_interval = 1<<24;
 
 	return 1;
diff --git a/fips/rand/fips_drbg_hmac.c b/fips/rand/fips_drbg_hmac.c
index bf10609dee..7733386b92 100644
--- a/fips/rand/fips_drbg_hmac.c
+++ b/fips/rand/fips_drbg_hmac.c
@@ -274,7 +274,7 @@ int fips_drbg_hmac_init(DRBG_CTX *dctx)
         dctx->max_pers = DRBG_MAX_LENGTH;
         dctx->max_adin = DRBG_MAX_LENGTH;
 
-        dctx->max_request = 1<<19;
+        dctx->max_request = 1<<16;
         dctx->reseed_interval = 1<<24;
 
 	return 1;